Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/0/3230302e3232302e3136382e302f32342d3234203d3e203631333137.roa
File:                     3230302e3232302e3136382e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          p9+f5FgDmp/kF3gvXHhL3OsiUqBMU6S43mYOdIyM2lA=
Subject key identifier:   A6:C1:B4:FE:ED:72:4D:70:A1:8F:F0:5B:21:7A:50:25:1D:CD:21:31
Certificate issuer:       /CN=65A09344BB82159BF3390F7713CC70EB58AE43DF
Certificate serial:       05ECD19788434BE0DF1DA898305718FD43FCCD70
Authority key identifier: 65:A0:93:44:BB:82:15:9B:F3:39:0F:77:13:CC:70:EB:58:AE:43:DF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/65A09344BB82159BF3390F7713CC70EB58AE43DF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/0/3230302e3232302e3136382e302f32342d3234203d3e203631333137.roa
Signing time:             Sun 25 Feb 2024 23:24:28 +0000
ROA not before:           Sun 25 Feb 2024 23:19:28 +0000
ROA not after:            Sun 23 Feb 2025 23:24:28 +0000
asID:                     61317
IP address blocks:        200.220.168.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:ec:d1:97:88:43:4b:e0:df:1d:a8:98:30:57:18:fd:43:fc:cd:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65A09344BB82159BF3390F7713CC70EB58AE43DF
        Validity
            Not Before: Feb 25 23:19:28 2024 GMT
            Not After : Feb 23 23:24:28 2025 GMT
        Subject: CN=A6C1B4FEED724D70A18FF05B217A50251DCD2131
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:7d:4c:cf:40:48:ab:3d:c6:42:44:c5:92:83:
                    79:6b:52:cc:1b:12:39:c1:bb:f0:f3:56:d6:42:07:
                    de:ff:2d:79:d7:f5:73:39:95:3e:b9:c8:0e:fd:a7:
                    4d:14:99:48:00:76:e6:df:01:f6:18:cc:8f:f8:61:
                    3f:48:bd:cc:c2:b9:9d:28:0d:96:89:60:8e:b9:9f:
                    88:ff:20:9b:bb:f7:01:b7:ad:29:f7:82:98:56:67:
                    ee:8b:8c:58:ac:03:37:94:59:5a:cc:84:11:86:4e:
                    f2:43:bb:0b:25:df:08:15:2b:7e:71:96:a6:bc:b7:
                    a0:30:a3:49:18:38:2b:ae:7d:37:21:0f:fc:e6:1d:
                    65:55:0f:a2:a6:65:31:a4:7b:f8:59:b1:af:79:b0:
                    7b:df:c1:f8:24:18:c3:a1:8a:b4:3c:d9:d1:f0:2a:
                    aa:ff:c2:5f:68:62:78:d6:e1:e9:d0:94:6d:66:99:
                    9f:2c:6f:60:a5:7f:db:47:a6:3c:51:80:77:bc:c1:
                    21:81:e3:c7:1d:1d:b5:e3:d1:12:17:10:4b:39:1e:
                    a3:12:4f:09:73:09:ec:c7:9a:8f:fd:d1:57:c9:8f:
                    37:a0:42:78:06:ce:54:4d:19:09:57:ac:5a:f1:68:
                    ff:3f:a7:3a:05:e8:76:fa:d9:51:33:41:44:61:f8:
                    e7:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:C1:B4:FE:ED:72:4D:70:A1:8F:F0:5B:21:7A:50:25:1D:CD:21:31
            X509v3 Authority Key Identifier:
                keyid:65:A0:93:44:BB:82:15:9B:F3:39:0F:77:13:CC:70:EB:58:AE:43:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/0/65A09344BB82159BF3390F7713CC70EB58AE43DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/65A09344BB82159BF3390F7713CC70EB58AE43DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/0/3230302e3232302e3136382e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.220.168.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:0b:13:18:11:6c:bf:ae:da:2c:8d:77:31:b3:00:02:fa:34:
         1b:b2:c7:fd:fb:62:22:b5:85:97:55:93:db:a0:2c:4f:c2:16:
         be:29:2f:9c:c9:8f:5c:6c:2c:70:3d:f5:b2:6e:39:08:de:97:
         67:d5:5c:13:f2:b8:ef:b4:d4:4f:a8:0f:8a:97:a1:96:1e:39:
         08:20:49:0e:db:d6:e7:86:19:fe:64:9a:e3:aa:a2:3c:f2:4a:
         b6:b6:8d:b6:eb:39:67:09:7e:80:54:7a:cd:7c:28:31:da:16:
         4a:c0:ea:6f:3e:c9:a1:e2:4c:64:dc:b9:20:55:ae:3a:81:3f:
         8a:33:e7:e0:5b:a7:c2:32:21:98:b6:b2:db:21:02:fd:4e:50:
         3e:ae:e9:44:0b:f9:7e:4d:aa:b4:5a:36:e8:b9:f2:5c:2a:af:
         a7:d3:a5:e5:f4:3a:83:52:13:e3:a2:ce:4a:7e:47:82:47:0a:
         bb:81:67:8f:af:09:58:aa:3e:9c:61:bf:a2:0f:56:86:5e:b3:
         61:ed:30:29:14:62:96:ee:1c:87:bd:2d:0e:1e:99:a3:d2:99:
         c0:57:05:4a:d4:b9:dc:7e:cf:87:52:c4:91:ba:a3:ff:2b:b2:
         e5:3c:ad:14:0e:7a:4b:9e:2d:2b:db:95:01:8f:00:3f:4c:8e:
         6d:72:c7:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:10 2024 by rpki-client on console-fra.rpki-client.org